php 登录验证的代码(基于文件保存的密码)

php实现用户登录的验证，代码：

<?php
/**
* @ 用户登录验证
* @ by www.jb200.com
*/
   $authorized = FALSE; //登录与否

   if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW'])) {
      $authFile = file("./password.txt");

      foreach ($authFile as $login) {
         list($username, $password) = explode(":", $login);
         $password = trim($password);
         if (($username == $_SERVER['PHP_AUTH_USER']) && ($password == md5($_SERVER['PHP_AUTH_PW']))) {
            $authorized = TRUE;
            break;
         }
      }
   }

   // If not authorized, display authentication prompt or 401 error
   if (! $authorized) {
      header('WWW-Authenticate: Basic Realm="Secret Stash"');
      header('HTTP/1.0 401 Unauthorized');
      print('You must provide the proper credentials!');
      exit;
   }

?>

//保存密码的文件password.txt
<!-- password.txt
joe:60d99e58d66a5e0f4f89ec3ddd1d9a80

-->